critical
CVE-2017-16820
collectd: double free in csnmp_read_table function in snmp.c
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.6CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), Amazon (medium), Ubuntu (medium).
Description
The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, which could lead to a crash (or potentially have other impact).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.5 | collectd | 5.6.2-r1 |
| alpine 3.6 | collectd | 5.6.2-r1 |
| amazon linux 1 | collectd, collectd-amqp, collectd-apache and 43 more | 5.8.0-2.19.amzn1 |
| debian 11 | collectd | 5.8.0-1 |
| debian 12 | collectd | 5.8.0-1 |
| debian 13 | collectd | 5.8.0-1 |
| debian 8 | collectd | no fix listed |
| debian 9 | collectd | no fix listed |
| echo | collectd | 5.8.0-1 |
| Red Hat | collectd, collectd-amqp, collectd-apache and 22 more | no fix listed |
| ubuntu 14.04-ESM | collectd | 5.4.0-3ubuntu2.2+esm1 |
| ubuntu 16.04-ESM | collectd | 5.5.1-1ubuntu0.1~esm1 |
Show all 81 entries from 12 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.5 | collectd | 5.6.2-r1 |
| alpine 3.6 | collectd | 5.6.2-r1 |
| amazon linux 1 | collectd | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-amqp | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-apache | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-bind | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-chrony | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-curl | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-curl_xml | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-dbi | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-debuginfo | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-disk | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-dns | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-drbd | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-email | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-generic-jmx | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-gmond | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-hugepages | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-ipmi | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-iptables | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-ipvs | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-java | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-lua | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-lvm | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-mcelog | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-memcachec | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-mysql | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-netlink | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-nginx | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-notify_email | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-openldap | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-postgresql | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-python | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-rrdcached | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-rrdtool | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-snmp | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-snmp_agent | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-synproxy | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-utils | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-varnish | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-web | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-write_http | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-write_sensu | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-write_tsdb | 5.8.0-2.19.amzn1 |
| amazon linux 1 | collectd-zookeeper | 5.8.0-2.19.amzn1 |
| amazon linux 1 | libcollectdclient | 5.8.0-2.19.amzn1 |
| amazon linux 1 | libcollectdclient-devel | 5.8.0-2.19.amzn1 |
| amazon linux 1 | perl-Collectd | 5.8.0-2.19.amzn1 |
| debian 11 | collectd | 5.8.0-1 |
| debian 12 | collectd | 5.8.0-1 |
| debian 13 | collectd | 5.8.0-1 |
| debian 8 | collectd | no fix listed |
| debian 9 | collectd | no fix listed |
| echo | collectd | 5.8.0-1 |
| Red Hat | collectd | no fix listed |
| Red Hat | collectd-amqp | no fix listed |
| Red Hat | collectd-apache | no fix listed |
| Red Hat | collectd-curl | no fix listed |
| Red Hat | collectd-curl_json | no fix listed |
| Red Hat | collectd-curl_xml | no fix listed |
| Red Hat | collectd-dbi | no fix listed |
| Red Hat | collectd-dns | no fix listed |
| Red Hat | collectd-generic-jmx | no fix listed |
| Red Hat | collectd-ipmi | no fix listed |
| Red Hat | collectd-iptables | no fix listed |
| Red Hat | collectd-ipvs | no fix listed |
| Red Hat | collectd-java | no fix listed |
| Red Hat | collectd-lvm | no fix listed |
| Red Hat | collectd-mysql | no fix listed |
| Red Hat | collectd-netlink | no fix listed |
| Red Hat | collectd-ping | no fix listed |
| Red Hat | collectd-python | no fix listed |
| Red Hat | collectd-rrdcached | no fix listed |
| Red Hat | collectd-rrdtool | no fix listed |
| Red Hat | collectd-sensors | no fix listed |
| Red Hat | collectd-snmp | no fix listed |
| Red Hat | collectd-virt | no fix listed |
| Red Hat | collectd-write_riemann | no fix listed |
| Red Hat | perl-Collectd | no fix listed |
| ubuntu 14.04-ESM | collectd | 5.4.0-3ubuntu2.2+esm1 |
| ubuntu 16.04-ESM | collectd | 5.5.1-1ubuntu0.1~esm1 |
References
- https://access.redhat.com/errata/RHSA-2018:0252
- https://access.redhat.com/errata/RHSA-2018:0299
- https://access.redhat.com/errata/RHSA-2018:0560
- https://access.redhat.com/errata/RHSA-2018:1605
- https://access.redhat.com/errata/RHSA-2018:2615
- https://access.redhat.com/security/cve/CVE-2017-16820
- https://bugs.debian.org/881757
- https://github.com/collectd/collectd/commit/d16c24542b2f96a194d43a73c2e5778822b9cb47